Research Of The Authentication Technology Based On Multiple Factors On The Internet

With the progress of the times and technology,the Internet is profoundly changing the social life of the information age.Online activities People have been engaged in become more and more.But everything has advantages and disadvantages.The widespread network makes security issues increasingly prominent,such as: network fraud,virus attacks,phishing sites and so on.As the first security barrier,Identity authentication plays an indispensable role in the whole network security.It is the foundation of all network security.Internet identity authentication technology has drawn more and more people's attentions and people will put more research to the area.First of all,the thesis analyzes the disadvantages of the S/Key system and points out its existing security threats,such as decimal attack and client attack.Then,strategies are proposed to improve the two threats.Firstly,the time factor is added to the algorithm of generating dynamic password to solve the dynamic cycle problem.Secondly,the client calculates the dynamic password with information of authentication and password which is used for the last time successfully.Then the password is used to compare with the last dynamic password from the information of authentication and complete the authentication to the server.Then this thesis puts forward a multi-factor identity authentication scheme.The idea of the scheme is based on the improved S/Key and fingerprint recognition.The combination of them makes their respective advantages to play and overcomes the lack of a single factor identity authentication.The dynamic password is used to verify the server and the fingerprint identification is used to verify the client.So the scheme can avoid the middle attack effectively.Secondly,the thesis focuses on the key technologies in the scheme.SSL is used to make sure the security when information is transmitted on the network.Symmetric encryption and digital signature are used to ensure the integrity,confidentiality and non-repudiation of information.This combination of dynamic password and fingerprint feature is that dynamic password is used to encrypt the fingerprint feature value,which effectively solves the security problem of the fingerprint feature in the network transmission.Then the thesis analyzes the algorithm in detail which is used in fingerprint image processing.Gabor filter is used to enhance Fingerprint image.A local adaptive threshold method is used in the binarization process.The refinement process uses a fast parallel refinement algorithm.An 8-neighborhood coding ridge tracking algorithm is used to extract the feature points.The two algorithms of point matching of fingerprint based on the shortest distance and the quad-tree are compared and analyzed.Finally,the thesis implements a system of a multi factor authentication according to the proposed scheme.The system focus on the detailed design of client various module and server various module.Then Java technology is used to achieve them.The client is implemented with Applet and the server is implemented with Servlet in Java.At last,the simulation test of the system is carried out,and the feasibility and safety of the system are demonstrated by running the test results and related theories.